CVE-2024-51326

SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in…

High · published November 4, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00899 · 59.2th percentile
Published
2024-11-04T00:00Z
EPSS history
Timeline
  • 04 NOV 00:00Z
    SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in…
    cvelistv5